Description
A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anhui Deshun Intelligent Technology | Jieshun JieLink+ JSOTC2016 | 20240805 | — |
References
- VDB-275071 | Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control vdb-entry
- VDB-275071 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #387126 | 安徽德顺智能科技有限公司 JIELINK+ INTELLIGENT TERMINAL OPERATION PLATROFM JSOTC2016 fJeLink+ Improper Access Controls third-party-advisory
- https://wiki.shikangsi.com/post/share/7d5eb025-1c30-44b4-b609-61938f6d6c05 exploit